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Software execution protection using an active entity 



The present invention relates in general to prevention of execution of 
computer program code, and in particular to encrypting and decrypting static data by using an 
active entity. 



5 

Strong execution protection methods can make use of a so called hardware 
dongle, as an example of one type of active entity, connected to, for instance, a parallel or a 
serial port, such as the USB (Universal Serial Bus) port or the printer port of, for instance, a 
PC (Personal Computer). A dongle is typically a passive element but can contain 
10 programmable memory loaded with several encryption/decryption keys. Information can be 
exchanged between the PC and the dongle. Such a dongle can for example be used in the 
following two ways: 

1 . For protection of execution of software, a shell program is created around 
the software to be protected. In the process of creating the shell, the original software is 

15 completely or partially encrypted in dependence of the keys from the dongle, after which the 
encryption is embedded in the shell. The created shell is thus based on the keys from the 
dongle but also on the algorithm used to decrypt the software. When the shell is started, it 
retrieves the keys from the dongie, extracts the encrypted software, decrypts said encrypted 
software and runs the original software. In the case the dongle is not present or in case a 

20 different dongle, containing different keys, is used, the decryption fails. 

2, Also, for protection of execution of software, the entry-point of the original 
program can be replaced with the entry-point of a procedure. A logical function is provided 
and retrieves the keys from the dongle. Based on the retrieved keys, complex logic is 
arranged to decide whether the dongle is the correct dongle, or not. After a successful dongle 

25 identification the function calls the original program entry-point, which enables execution of 

the original software. 

There are however several disadvantages with the mentioned methods: 

The communication content of the different communication sessions between 

the PC and the dongle is usually the same, which implies that by wiretapping said 
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communication it is possible to retrieve the protocol and the keys, and later emulate the 
dongle in either hardware or software, without the need for the original dongle. 

After the dongle is identified, the entry-point of the original program is called, 
and the original program is provided in the memory as is. The experienced user can write the 
5 program back to the portable executable of said program. 

There is usually one, or several, if-instructions in the dongle checking code, 
which can be easily replaced by using a reversed logic. 

Security tools in general and hardware dongles are moreover discussed in G. 
Hachez, "A comparative study of software protection tools suited for E-commerce with 
10 contributions to software watermarking and smart cards" Doctor's Thesis, UCL, Louvain-La- 
Neuve, Belgium, March, 2003. 

According to this document recent hardware dongle versions can be plugged 
into a USB port and usually embed a CPU of a smart card. These versions contain a small 
micro-controller that will return a different value to each challenge. The software will 
15 regularly interrogate the dongle with a challenge and verify that the answer is correct. The 
most advanced dongles contain a small micro-controller with a small amount of memory. In 
this case some critical parts of the software are executed within the dongle. 

The methods of the hardware dongle versions as discussed above have the 
following drawbacks. Firstly, there is a risk that removing all checks of the dongle in the 
20 software to be protected can be successful. Secondly, there is a risk that the dongle is 
emulated by an intruder. 

There is thus a need for a software execution protection method for which the 
software cannot be run even after removal of the checks for an active entity, such as a dongle 
in the software. There is further a need for a method that does not comprise single if-then 
25 instructions depending on whether the correct entity is present or not. 

It is an object of the present invention to provide protecting execution of a 
computer program element by using enciyption of static resources of said computer program 
30 element. 

According to a first aspect of the present invention, this object is achieved by a 
method of encrypting at least part of a computer program element for enabling protecting 
execution of said computer program element, comprising the steps of: 

extracting at least one static resource of said computer program element, and 
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encrypting the at least one static resource with a key. 

According to a second aspect of the present invention^ this object is also 
achieved by a computer program encryption device for encrypting at least part of a computer 
program element for enabling protecting execution of said computer program element, being 
S arranged to: 

extract at least one static resource of said computer program element, and 

encrypt the at least one static resource with a key. 

According to a third aspect of the present invention, this object is also 
achieved by a computer program product comprising a computer readable medium, having 
10 thereon computer program code means, to make a computer execute, when said computer 
program code means is loaded in the computer: 

extracting of at least one static resource of said computer program element, 

and 

encrypting the at least one static resource with a key. 
15 According to a fourth aspect of the present invention, this object is also 

achieved by a computer program element comprising computer program code means to make 
a computer execute, when said computer program code means is loaded in the computer: 

extracting of at least one static resource of said computer program element, 

and 

20 - encrypting the at least one static resource with a key. 

According to a fifth aspect of the present invention, this object is also achieved 
by a computer program product comprising a computer readable medium, having thereon 
computer program code means comprising: 

- at least one static resource encrypted with a key. 
25 According to a sixth aspect of the present invention, this object is also 

achieved by a computer program element comprising computer program code means 
comprising: 

at least one static resource encrypted with a key. 

According to a seventh aspect of the present invention, this object is also 
30 achieved by a method of decrypting at least part of a computer program element for enabling 
execution of said computer program element, comprising the steps of: 

obtaining at least one static resource encrypted with a first key, in a first entity, 
providing said at least one encrypted static resource to a second entity, and 
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obtaining by said first entity said at least one static resource from the second 
entity, where the encryption according to the first key has been decrypted by using a second 
key. 

According to a eighth aspect of the present invention, this object is also 
5 achieved by a method of decrypting at least part of a computer program element for enabling 
execution of said computer program element, comprising the steps of: 

obtaining at least one encrypted static resource from a first entity, which at 
least one static resource has been encrypted by using a first key, 

obtaining a second key, 

1 0 - decrypting said at least one encrypted static resource, by using said second 

key, and 

providing said at least one static resource to the first entity. 

According to a ninth aspect of the present invention, this object is also 
achieved by a computer program decryption device for decrypting at least part of a computer 
15 program element for enabling execution of said computer program element, said device being 
arranged to: 

obtain at least one static resource encrypted with a first key, 

provide said at least one encrypted static resource to a second entity, and 

obtain from the second entity said at least one static resource, where the 

20 encryption according to the first key has been decrypted by using a second key. 

According to a tenth aspect of the present invention, this object is also 
achieved by a computer program decryption device for decrypting at least part of a computer 
program element for enabling execution of said computer program element, arranged to: 

obtain at least one encrypted static resource from a first entity, which at least 

25 one static resource has been encrypted by using a first key, 
obtain a second key, 

decrypt said at least one encrypted static resource, by using said second key, 

and 

provide said at least one static resource to the first entity. 
30 According to a eleventh aspect of the present invention, this object is also 

achieved by a computer program product comprising a computer readable medium, having 
thereon computer program code means, to make a computer execute, when said program 
code means is loaded in the computer: 

obtaining at least one static resource encrypted with a first key, in a first entity. 
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providing said at least one encrypted static resource to a second entity, and 
obtaining by said first entity said at least one static resource ttom the second 

entity, where the encryption according to the first key has been decrypted by using a second 

key. 

5 According to a twelfth aspect of the present invention, this object is also 

achieved by a computer program element comprising computer program code means to make 
a computer execute, when said computer program code means is loaded in the computer: 

obtaining at least one static resource encrypted with a first key, in a first entity, 
providing said at least one encrypted static resource to a second entity, and 
10 - obtaining by said first entity said at least one static resource from the second 

entity, where the encryption according to the first key has been decrypted by using a second 
key. 

According to a thirteenth aspect of the present invention, this object is also 
achieved by a computer program product comprising a computer readable medium, having 
15 thereon computer program code means, to make a computer execute, when said program 
code means is loaded in the computer: 

obtaining at least one encrypted static resource from a first entity, which at 
least one static resource has been encrypted by using a first key, 
obtaining a second key in a second entity, 
20 - decrypting said at least one encrypted static resource, by using said second 

key, and 

providing said at feast one static resource to the first entity. 

According to a fourteenth aspect of the present invention, this object is also 
achieved by a computer program element comprising computer program code means to make 
25 a computer execute: 

obtaining at least one encrypted static resource from a first entity, which at 
least one static resource has been encrypted by using a first key, 

obtaining a second key in a second entity, 

decrypting said at least one encrypted static resource, by using said second 

30 key, and 

providing said at least one static resource to the first entity. 

The general idea behind the present invention is to protect execution of 
computer program code by using encrypting of a computer program element of a static 
resource within said computer program code. The idea further relies on the usage of two 
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entities during decrypting of said encrypted a static resource, wherein communication 
between said two entities is at least partly encrypted. 

The present invention has the following advantages: 

1 . It provides protecting execution of a computer program code by encrypting at 
5 least one static resource that is crucial for the execution of said computer program code. 

2. The process of decryption requires a first and a second entity. 

3. The computer program code cannot be executed within the first entity even 
after removal of requests for the second entity. 

Direction of the dependent claims and the advantages thereof: 
to Claim 2 is directed toward storing the at least one encrypted static resource in 

said computer element. This claim has the advantage that resources that are needed during 

execution of a computer program element can be encrypted. 

Claims 3, 11, 18 and 23 are directed toward using a public key and a private 

key of a public/private key pair. The advantage being that one key is needed to decrypt data 
15 that was encrypted by the other key. 

Claims 4 and 12 are directed toward having the public key in a computer 

program element and computer program code means, respectively. These claims have the 

advantage of enabling the usage of a secure private key for decrypting data that have been 

encrypted by using the public key. 
20 Claim 5 is directed towards obtaining the private key, corresponding to the 

public key, and storing said private key in an entity separate from an entity in which a 

computer program element is provided. This claim has the advantage of dramatically 

enhancing the security of the protection of execution by enabling separation of the two 

entities. 

25 Claim 6 is directed towards extracting at least one static resource from a 

position in a computer program element and storing the encrypted resource in said position. 
This is advantageous as firstly, the original information is not available and secondly, no 
other part or element is affected by the storing of the encrypted resource. 

Claims 15 and 20 are directed toward obtaining a third key and 

30 encrypting/decrypting of at least one static resource by using said third key. These claims 
carry the advantage that the static resource sent by one entity to another entity, can be 
encrypted with said third key. 
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Claims 16 and 24 are directed towards using a third key that is a random 
session key. The advantage with a key being symmetric is that the same key can be used for 
encryption and decryption, which limits the number of used keys. 

Claims 17, 21 and 22 are directed towards further using the first key for 
5 encrypting/decrypting the third key and the at least one encrypted static resource. This has 
the advantage that the third key can be sent enciypted from one entity to the other, enabling 
enhanced security of the encryption of the static data by using the third key. 

These and other aspects of the invention will be apparent from and elucidated 
with reference to the embodiments described hereinafter. 
10 It should be emphasized that the term "comprises/comprising" when used in 

this specification is taken to speciiy the presence of stated features, integers, steps or 
components, but does not preclude the presence or addition of one or more other features, 
integers, steps, components or groups thereof. 

15 

The present invention will be more clearly understood from the following 
description of the preferred embodiments of the invention read in conjunction with the 
attached drawings, in which: 

Fig. 1 presents a flow-chart of a method of encrypting according to a preferred 
20 embodiment of the present invention; 

Fig. 2A presents a flow-chart of a method of decrypting according to a 
preferred embodiment of the present invention, performed in a device having the computer 
program code; 

Fig. 2B presents a flow^chart of a method of decrypting according to a 
25 preferred embodiment of the present invention; 

Fig. 3 schematically illustrates enciyption of a program code according to the 
present invention; 

Fig. 4 schematically illustrates decryption of a protected program code 
according to the present invention; 
30 Fig. 5 schematically presents a computer and a dongle, which two entities 

communicate during decrypting of encrypted data; 

Fig. 6 shows a computer program product, having thereon computer program 
code means, related to the present invention. 
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The present invention relates to protecting execution of computer program 
code by encrypting and decrypting static resources of said computer program code. 

The encryption and decryption uses Public Key Cryptography architecture and 
S requires accessing the source code of the computer program code to be protected. 

According to one embodiment of the present invention two different entities 
are used in the process of decrypting encrypted information. Fig. 5 presents one embodiment 
of the present invention of these two different entities. A computer such as a personal 
computer 52, represents a first entity and an active dongle 54, represents the second entity. 
10 These two entities are arranged to send/receive information during the decrypting steps of the 
process. 

Instead of a dongle, a security chip can be used. This security chip can be 
integrated in the computer platform. 

The active dongle is typically equipped with a small processor that can run 
15 simple symmetric and asymmetric encryption/decryption algorithms. The interface between 
the two entities, here the computer and the active dongle, can be USB (Universal Serial Port), 
a network, or another communication channel. The communication between the computer 
2ind the active dongle is based on the client-server model. 

Before the computer program code to be protected is distributed on the market, 
20 at least part of the static data are extracted and encrypted by using the public key of the active 
dongle, and replaced in the source code as encrypted data. Upon compilation and running the 
computer program code, only the dongle with the corresponding private key can decrypt the 
data prior to using the data in the computer program code. 

As is described below, encryption is typically carried out elsewhere 
25 independent of said computer. As is well known for a person skilled in the art encrypting and 
decrypting of information are related to each other, in a way similar to a key and a lock, 
being related. Here, the process of encrypting is performed so that a communication channel 
between the computer and the dongle is established for decrypting the encrypted data. 

According to one embodiment of the present invention the process of 
30 decrypting starts within the computer, having loaded decrypted program code, and continues 
by sending information over the communication channel to the dongle, where the decrypting 
process further continues, followed by the dongle sending information back to the computer, 
at which entity the program code eventually can be executed. 
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The invention will now be described starting by referring to Fig. 1 presenting a 
flow-chart of encryption of at least part of a computer program element together with Fig. 3 
schematically illustrating encryption of a computer program code. This encryption is 
typically carried out within a third entity different from the above mentioned two entities. 
S For encrypting program code, at least some static data 306, is extracted, step 

102, from the original program code 302. The remains of said original program code 302, 
that is the original program code 302, without the extracted static data 306, here represented 
by the program code 304, is thus also created. In this embodiment the static data of the 
original program can be of any type, for instance, strings, definitions, initial variable values, 

10 images, constants, format-related static data or other static resources. 

Having extracted the static data 306, a first and a second key in the form of a 
pair of encryption/decryption keys (a public key Kpb 314, and a private key Kpr 316) is 
generated, step 104. As is well known to a person skilled in the art, either one of the two keys 
can be used to encrypt data, and similarly either one of them can be used to decrypt data, but 

1 5 once one key is chosen to, for example, encrypt data only the other one can be used to 
decrypt said encrypted data. 

Here, the static data 306, is encrypted, step 106, by using the public key Kpb 
314, as an encryption key, creating the static data encrypted with said public key (Static 
data)Kpb 310. In order to provide the communication channel mentioned above, between the 

20 first entity, the computer and a second entity, the dongle, the program code 304, is changed, 
step 108, to achieve a modified program code 308. This communication channel will thus be 
used during the decrypting of data, which will be described below. 

According to this embodiment of the present invention, each piece of static 
data that is extracted, step 102, at a certain position of the program code, is replaced by an 

25 encrypted copy of said data. This is performed by storing the encrypted data, step 1 10, in the 
original program code, preferably but not necessarily at the position at which the non- 
encrypted data was present in the original program code, 102. Having stored the encrypted 
static data in the program code, the public key Kpb 314, is stored, step 1 12, in the program 
code to obtain, step 1 1 6, a protected program code 3 1 2. 

30 The private key Kpr 3 1 6, that corresponds to said public key Kpb 3 1 4, is 

stored in the dongle 3 1 8. 

The protected program code 312, obtained thus contains pieces of encrypted 
static data, which encrypted static data efficiently prevents the program code from being 
executed, without prior decrypting said static data. 
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It is obvious that only certain parts of the program code elements, that is the 
ones that are crucial for the execution of the program need to be encrypted. This implies that 
not all static data needs to be encrypted in order to prohibit the functioning of entire parts of 
computer program code. 
5 By decrypting pieces of the computer program code as such, the computer 

program code cannot be executed solely by cracking single if-then statements. This is in 
contrast to shell-like encryption methods, wherein the program code is to a large extent left 
un-encrypted but a shell preventing execution of said program code is encrypted. By cracking 
the single shell execution of the program within the shell is enabled. 
10 In the following will be described decrypting of encrypted computer program 

code upon execution of the encrypted program code. 

As mentioned above, in order to prevent execution of program code by an 
unauthorized party without the access to the dongle, encryption of critical program code 
elements is sufficient. Without the ability to execute key parts of the program code the 
15 function of the program code is not realized, at least not in full. 

As only critical parts are encrypted, the unencrypted parts can however be 
executed. Upon executing the program code, the method that is described below is used for 
each piece of program code element. For each such piece, a communication session is started 
and information is communicated over the communication channel between the computer 
20 and the dongle. Moreover, for each such session a session key is generated as will be 
explained in more detail below. 

In the following a more detailed description of decrypting static data, upon 
executing computer program code, is outlined, with reference being made to Figs. 2A, 2B, 4 
and 5. 

25 According to this embodiment of the present invention, performing execution 

of the protected computer program code 402, is started in the computer. In the protected 
computer program code the computer locates static data (Static data)Kpb 406, encrypted with 
the public key Kpb 314, from Fig. 3. Also, the computer retrieves the stored public key Kpb 
408, in the protected computer program code. 

30 Having encountered encrypted static data, a third key in the form of a random 

session key Ks 404, is generated, step 202. 

The encrypted static data 406, is then combined, step 204, with the generated 
random session key Ks 404, after which the combination of encrypted static data 406, and the 
session key Ks 404, is encrypted, step 206, by using the public key 406, thus generating an 
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encrypted combination ((Static data)Kpb+Ks)Kpb 4 10, of encrypted static data 406, and said 
session key Ks 404. 

Having generated this encrypted combination 410, said encrypted combination 
410, is sent, step 208, to the dongle 54. The vertical dotted line A, in Fig. 4, denotes the 
5 interface between the computer 52 and the dongle 54. 

The dongle can be connected to the computer by using a port of the computer 
or by using a connection over a network of any kind, for instance the Internet. 

Subsequently, in step 210, the computer 52, receives from the dongle 54-412, 
static data (Static data)Ks 430, decrypted fi'om the public key Kpb 314, from Fig. 3, but 
10 encrypted with a random session key Ks 426. The computer then decrypts, step 212, the 
encrypted static data by using a session key Ks 432. 

As the random session key is a symmetric key, encrypting and decrypting is 
performed by using the same key. This implies that the random session key 426, the session 
key 432, and the random session key Ks 404, are the same keys. 
15 Upon decrypting, the static data 434, is obtained, step 214, which static data 

434, is used upon request during the execution of the program code 436. 

Above was described the method in a computer of decrypting encrypted static 
data. Below is now described the method in the dongle of decrypting encrypted static data. 

According to this embodiment of the present invention the dongle 54, firstly 
20 obtains, step 216, the private key Kpr 3 16 in Fig. 3, during the method of encrypting static 
data. Secondly, it receives, step 218, an encrypted combination ((Static data)Kpb+Ks)Kpb 
410, of 1) static data, 406, encrypted with the public key, and 2) the session key Ks 404, 
where said combination is encrypted with the public key Kpb 408. From the dongle 54, said 
encrypted combination ((Static data)Kpb+Ks)Kpb 414, and the private key Kpr 416, are 
25 extracted. Now, by using the private key 416, the enciypted combination 414, is decrypted, 
step 220, generating the session key Ks 420, and the static data (Static data)Kpb 418, 
encrypted whh the public key Kpb 408. Following this decryption, the encrypted static data 
41 8, is decrypted, step 222, by again using the private key Kpr 422, which is the same key as 
referred to the private key 416. Upon this decrypting, step 222, decrypted static data 424, is 
30 obtained, step 224. 

The dongle has thus obtained decrypted static data. Now the decrypted static 
data 424, is again encrypted, step 226, but at this step by using the session key 426, which 
key is obtained from decrypting the encrypted combination, step 220. 
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Obtained is thus the static data decrypted from the initial encryption performed 
by using the public key Kpb 314 in Fig. 3, but encrypted by using the session key 426. This 
encrypted static data (Static Data)Ks 428, is now sent, step 228, from the dongle 54, to the 
computer 52, over the dongle*computer interface as indicated by B in Fig. 4. 
5 According to one embodiment of the present invention this interface B is the 

dongle-computer USB interface. This interface can however as an ahemative contain a 
network, such as the Internet, another network, with one or more other computers, or a 
communication channel of any type. 

Fig. 6 shows a computer program product 62, that has computer program code 
10 means stored thereon. This computer program product can be of any type, for instance a 

Compact Disc (CD), a diskette, a Digital Versatile Disc (DVD), solid-state memory, or a hard 
disk. 

The protecting execution of a computer program code can be used to prevent 
unauthorized access to any hardware that is controlled by or in some way dependent on said 
15 computer program code. Using the proper active entity, i.e. the proper dongle, accordingly 
authorizes access to said hardware. 

The invention can further be varied in many ways, as described below. 
One alternative to the embodiment as presented above is to make use of a 
security chip as the second entity. It is hence understood that the security chip and said 
20 computer are two discrete entities, even though one might be positioned within the other. One 
example of a security platform involving security chips is the TCPA/Palladium platform, 
which platform is well suited to be used in this alternative embodiment. 

In another embodiment of the present invention protecting execution of a 
computer program code is enabled by using an active entity of the type of another computer 
25 program code. This is thus an alternative to the embodiments in which a security chip or a 
dongle is used for the decryption of encrypted static resources. 

In a different embodiment the order of the steps of the method of encrypting 
static data can be changed and some steps can even be deleted without deferring from the 
scope of protection of this present invention. For instance, the step of changing program 
30 code, step 108, can be performed prior to the step of generating public and private keys, step 
104. 

In another embodiment of the present invention, the method of decrypting 
static data comprises sending the encrypted data by a computer to a dongle, in which the data 
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is decrypted by using a private key and further returned to the computer. In this embodiment 
there is no usage of a session icey. 

In yet another embodiment of the present invention, the method of decrypting 
static data comprises sending by a computer to a dongle the encrypted data and a session key, 
5 The dongle decrypts the static data, encrypts the static data by using the session key and 
returns the data to the computer. This embodiment does not use the public key to encrypt the 
combination of the session key and the encrypted static data. 

In yet another embodiment of the present invention the method of decrypting 
the static data the session key and the encrypted static data are encrypted separately by using 
10 the public key. There is hence no encrypted combination of session key and encrypted static 
data. 

In an alternative of the embodiment as mentioned above, the session key only 
is encrypted by the computer, whereas the already enciypted static data is sent to the dongle 
as is. 

^ 5 yet another embodiment the computer program decryption device is a 

distributed computer device comprising several computers. 

In yet another embodiment of the present invention, the static data extracted at 
a certain position of a computer program element is stored at a different position of the same 
or a different computer program element. The unencrypted static data is extracted from the 
20 element and is no longer available at its position. 

In still yet another embodiment the generation of the session key during 
decrypting encrypted static data, is performed by the computer, on order from the program 
code. 

In still yet another embodiment, the generation of the session key during 
25 decrypting enciypted static data, is performed by the program code before encountering a 
new piece of encrypted static data. 

In still yet another embodiment, the first entity is any type of computer, such 
as a PDA (Personal Digital Assistant), a palm top computer, a lap top computer, a personal 
computer, a gaming computer, a computer server, or similar. 
30 It should be noted that the above-mentioned embodiments illustrate rather than 

limit the invention, and that those skilled in the art will be able to design many alternative 
embodiments without departing from the scope of the appended claims. 

In the claims, any reference signs placed between parentheses shall not be 
construed as limiting the claim. The word "comprising" does not exclude the presence of 
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elements or steps other than those listed in a claim. The word "a" or "an" preceding an 
element does not exclude the presence of a plurality of such elements. The invention can be 
implemented by means of hardware comprising several distinct elements, and by means of a 
suitably programmed computer. A single processor or other (programmable) unit may also 
5 fulfill the functions of several means recited in the claims. 

In the device claim enumerating several means, several of these means can be 
embodied by one and the same item of hardware. The mere fact that certain measures are 
recited in mutually different dependent claims does not indicate that a combination of these 
measures cannot be used to advantage. 



